Canada Post Phish from France

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 24 Apr 2024 12:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rzhcD-000000009zT-2DeY

for dave@doctor.nl2k.ab.ca;

Wed, 24 Apr 2024 12:45:09 -0600

Resent-From: The Doctor

Resent-Date: Wed, 24 Apr 2024 12:45:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtpout02-ext4.partage.renater.fr ([194.254.241.31]:48318)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rzesi-00000000Awa-01l6

for root@nk.ca;

Wed, 24 Apr 2024 09:50:17 -0600

Received: from zmtaauth02.partage.renater.fr (zmtaauth02.partage.renater.fr [194.254.241.25])

by smtpout20.partage.renater.fr (Postfix) with ESMTP id F009BC01B6

for ; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)

Received: from zmtaauth02.partage.renater.fr (localhost [127.0.0.1])

by zmtaauth02.partage.renater.fr (Postfix) with ESMTPS id EB82CA016F

for ; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by zmtaauth02.partage.renater.fr (Postfix) with ESMTP id D1B61A0765

for ; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth02.partage.renater.fr D1B61A0765

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=etu.univ-orleans.fr;

s=75C661D4-E48C-49B6-AFC7-D2E4031D8F72; t=1713973671;

bh=qMd6gglLjB7C4q+gmSbybN9OFBepQfW+6tKH0ZoFdZU=;

h=MIME-Version:From:To:Date:Message-Id;

b=WS1s8jSvsZpimlj/L7EUtxYbgt4DsthISmUp/j3M7H9qMSwKDVjPE9ESSPCV6vYBU

9eT7wiFCbIhGkP+tkF3T23jydfYftwyIe6QeQ1w0L9o48RzbEgDYBacaC287rNEPZA

TglIpFiNXeSdsuUh0/5vEXxhuUabUrGfmam6xYyY+sfY8qW/P1dQiGl2kMuqgbLxIH

FmHBFFazKNE5F6Z76Esmk/mXY6LyEo6mr+MRipl0qwuX7NB7emTQ/ZimNaeryNw4Z0

1TXEM8yuOcuoRb4jwPOImTUDjgfXBfN/86jJbGKSC3X1zuubZpQKM2GM8VHx3AqOWK

8ZfwVqSOYVDgw==

Received: from zmtaauth02.partage.renater.fr ([127.0.0.1])

by localhost (zmtaauth02.partage.renater.fr [127.0.0.1]) (amavis, port 10026)

with ESMTP id 8wGoV1W-fxWO for ;

Wed, 24 Apr 2024 17:47:51 +0200 (CEST)

Received: from 18.223.180.249 (unknown [194.254.241.251])

by zmtaauth02.partage.renater.fr (Postfix) with ESMTPA id 30609A0752

for ; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)

MIME-Version: 1.0

From: "Services"

To: root@nk.ca

Date: 24 Apr 2024 15:47:51 +0000

Subject: You have notification

Content-Type: multipart/alternative;

boundary=--boundary_1935_3012c203-105d-4c15-bb39-8a5ada64abed

Message-Id: <20240424154751.30609A0752@zmtaauth02.partage.renater.fr>

X-Virus-Scanned: clamav-milter 0.103.8 at clamav04

X-Virus-Status: Clean

X-Renater-Ptge-SpamState: spam:medium

X-Renater-Ptge-SpamScore: 300

X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrudelhedgfeefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgpfetvffgtfenuceurghilhhouhhtmecufedttdenucgoufhprghmffhomhgrihhnucdlfedttddmnecujfgurhepggfhvfffufgtkfesrgdtfeertddtjeenucfhrhhomhepfdfuvghrvhhitggvshdfuceonhhorhgvphhlhieifedtjedvfeehgeeffeesvghtuhdruhhnihhvqdhorhhlvggrnhhsrdhfrheqnecuggftrfgrthhtvghrnhepudfggeettefgudfhkeeuveeugfeuudeifedvtdfgvedvieeijeeujefgffevgeefnecuffhomhgrihhnpegtrghnrggurghpohhsthdqphhoshhtvghstggrnhgruggrrdgtrgdptghffigvsghrrgguihhordhnvghtnecukfhppeduleegrddvheegrddvgedurddvhedunecuufhprghmffhomhgrihhnpedukedrvddvfedrudektddrvdegleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvhedupdhhvghlohepudekrddvvdefrddukedtrddvgeelpdhmrghilhhfrhhomhepnhhorhgvphhlhieifedtjedvfeehgeeffeesvghtuhdruhhnihhvqdhorhhlvggrnhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehrohhothesnhhkrdgtrg

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:

aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">